Smart shield for PHP & WordPress

Professional web security.
In one line of code.

Guardian Web automatically protects your PHP or WordPress site. Install it in minutes, monitor threats in real time and manage everything from a centralized panel.

Start for free View plans

index.php

                            <?php
                        
                            // // Add this line at the top of your PHP files
                        
                            require_once
                             __DIR__ . 
                            '/gw-shield.php';
                        
                            // // Or in wp-config.php for WordPress
                        
                            // wp-config.php
                        
                            require_once
                             ABSPATH . 
                            'gw-shield.php';
                        
                            That's it. You're protected.

< 5 minutes

Installation

PHP 8.0+ · WordPress

Compatibility

Shield works offline

No external dependencies

€0 / month

Plans starting at

Quick Start

Up and running in 3 steps

You don't need to be a security expert. Guardian Web handles everything for you.

Create your account

Download the shield

Download gw-shield.php from your panel and upload it to your server. No installers, no dependencies.

One line and done

Add require_once to the top of your PHP or in wp-config.php. The shield starts protecting you instantly.

Features

Everything you need to protect your site

A complete ecosystem of security, analytics and maintenance in a single panel.

Real-time shield

Automatically detects and blocks threats before they reach your application. No manual configuration.

GeoIP Blocking Basic+

Restrict access by country with a single click. Ideal for sites with a defined geographic audience.

Shared network karma

Every IP accumulates a dynamic reputation score based on its behaviour across the entire Guardian Web network. The more it attacks, the stricter the response: captcha, throttle, temporary ban, or permanent exile.

Telegram Alerts Pro

Receive instant notifications on your phone when an attack or suspicious activity is detected.

AbuseIPDB Integration Pro

Check each IP's reputation against the world's largest public database of malicious IPs.

Bot Management Pro

Decide which bots can access your site. Allow legitimate crawlers, block scrapers and malicious bots.

Stats & Maps

Real-time traffic charts, geographic visitor maps and user behavior analysis.

Threat Feeds Pro

Subscribe to external malicious IP feeds for proactive and up-to-date protection.

Centralized multi-site

Manage the security of all your domains from a single panel. One login for everything.

Maintenance Mode

Activate maintenance mode on any site with one click, without modifying server files.

Data Export Basic+

Export logs, banned IP lists and statistics in CSV format for external analysis.

Ticket System Pro

Built-in support channel directly in the panel to resolve queries quickly.

Progressive Web App

Install the panel as an app on your device for quick access and a native experience.

Karma Network

The Karma Network: shared reputation

Every IP accumulates a behaviour history across all sites protected by Guardian Web. The worse an IP behaves, the more restrictive the response — automatically.

⚠️ Low karma
Captcha
A captcha is shown to verify the visitor is human before granting access.
🔶 Medium karma
Throttle
Access is artificially slowed down: the IP is limited to N requests per minute.
🚫 High karma
Temporary ban
The IP is blocked for a configurable period. It unblocks itself once the time expires.
☠️ Critical karma
Permanent exile
The IP is added to the permanent blacklist and cannot access any site on the network.

See how it works in detail

wp-config.php

                            <?php
                        
                            /** // wp-config.php — One line at the top of the file */
                        
                            require_once
                             ABSPATH . 
                            'gw-shield.php';
                        
                            // Your WordPress configuration continues here...
                        
                            define( 'DB_NAME', '...' );
                        
                            define( 'DB_USER', '...' );
                        
                            Compatible WordPress 5.0+

WordPress

Native WordPress Protection

No more security plugins to update. Guardian Web operates at the server level, above WordPress.

No conflicts with themes or plugins
Active protection even if WordPress fails
Detection of WordPress-specific attacks (xmlrpc, wp-login, etc.)
Compatible with WooCommerce, Elementor and any builder

View installation guide

Pricing

Simple, transparent pricing

Start free. Scale when your project needs it.

Free

For personal projects

Free

1 protected site
7-day history
Full dashboard
Real-time shield
Banned IP management
GeoIP blocking
CSV export
Telegram alerts
AbuseIPDB
Threat feeds
Bot management

Start for free

⭐ Most popular

Basic

For growing businesses

9,00€ /mo

3 protected sites
30-day history
Full dashboard
Real-time shield
Banned IP management
GeoIP blocking
CSV export
Telegram alerts
AbuseIPDB
Threat feeds
Bot management

Pro

For agencies & professionals

19,00€ /mo

10 protected sites
90-day history
Full dashboard
Real-time shield
Banned IP management
GeoIP blocking
CSV export
Telegram alerts
AbuseIPDB
Threat feeds
Bot management
Ticket support

Why Guardian Web and not a plugin or a WAF?

We compare honestly. Every tool has its place; here is ours.

	Guardian Web	WP plugins (Wordfence, Sucuri)	WAFs (Cloudflare, ModSecurity)
Installation	1 line of code	WP Admin plugin	DNS + configuration
Plain PHP compatibility	✓ Native	✗ WordPress only	~ No code access
Centralised multi-site	✓ Single dashboard	✗ Per site	~ Requires setup
Shared IP reputation	✓ Shared network	✗ Local only	~ Limited / paid
Entry price	Free	From $99/year	From $20/month
Where it acts	PHP (before WP)	WordPress (inside WP)	Network (before server)

FAQ

Frequently asked questions

Can't find what you're looking for? Open a ticket from your panel.

Do I need advanced knowledge to install Guardian Web?

No. The entire process takes less than 5 minutes. You just need to upload a PHP file to your server and add one line of code. If you know how to use FTP, you can do it.

Is it compatible with WordPress?

Yes. Add the installation line in wp-config.php and your entire WordPress site is immediately protected. No plugin installation required.

Can I manage multiple sites with one account?

Yes. The Basic plan lets you protect up to 3 sites and the Pro plan up to 10, all from the same panel with a single account.

How does the shield work without a connection to the panel?

The gw-shield.php file works autonomously on your server. It downloads and locally caches the block list, so it keeps protecting your site even if the panel is temporarily unavailable.

How are payments handled?

Payments are securely processed through LemonSqueezy. We accept major credit and debit cards. You will receive an invoice for each payment.

Can I cancel at any time?

Yes, you can cancel your subscription at any time with no penalties. You will retain access to the paid plan until the end of the billed period.

Ready to protect your website?

Start free today. No credit card. No commitments.

Create free account

Hundreds of PHP and WordPress sites are already protected with Guardian Web.

Professional web security. In one line of code.